Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          bBtTGh5MdeCDkDjInbwihCjVRHLuBGF5OC1NST0mUmg=
Subject key identifier:   94:BF:98:0B:F3:8F:EF:42:84:3F:B6:C8:4E:4F:03:F9:16:C8:A4:BE
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       019D27DFAEA18268ADCFBFB5EFC939382C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          11E7
Signing time:             Thu 26 Mar 2026 02:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:03 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: NtjROQP4scj-bd3rAQIfTM_a3J0.roa (hash: 2Z01mIMovc7MNUUvtWcENZUi/UbUUYFottmL0jYMx2s=)
                          3: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          4: VsCifY8XLUBVZAJIXlh4tHs6Tys.roa (hash: yx2cdHQ3fO2iayrPEdicOAnB23aOaGWVWINVVkpgEOY=)
                          5: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: UWg/XN+Yb7jTUvya3ZzBIJXnkTuLAX8963+299aw1rI=)
                          6: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:ae:a1:82:68:ad:cf:bf:b5:ef:c9:39:38:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Mar 26 02:01:03 2026 GMT
            Not After : Mar 27 02:01:03 2026 GMT
        Subject: CN=94bf980bf38fef42843fb6c84e4f03f916c8a4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5f:c2:09:ed:fb:65:44:43:d2:0d:eb:cb:02:
                    81:ec:14:b9:bf:05:23:32:13:9e:1b:6b:35:c8:1c:
                    69:d3:f7:36:24:0e:af:3b:ed:38:bd:7c:61:d3:bd:
                    27:9e:84:fc:73:39:cb:b6:fe:b0:8a:01:21:e2:37:
                    05:74:95:71:12:37:ff:71:e9:fc:66:80:34:c3:f0:
                    a3:e9:74:07:5d:f1:98:d2:cc:1c:39:fe:a9:7a:6a:
                    7a:67:b7:2b:fa:b6:2b:6b:6a:17:76:9c:75:c6:07:
                    99:e3:37:48:0c:90:0e:f3:7b:57:e1:79:c4:d0:c0:
                    6c:cb:07:35:bf:0c:a7:41:27:aa:f1:52:6e:f3:81:
                    5b:7f:79:99:92:14:7f:12:e2:5b:fc:33:82:37:bf:
                    13:b2:11:a3:6c:f7:b7:c0:ed:f1:de:c4:2c:a8:b4:
                    e0:c6:80:db:18:88:a0:be:14:28:56:2a:88:bb:eb:
                    f3:ad:af:74:0c:0e:b1:cb:7a:f2:07:12:9f:4a:70:
                    83:e9:e8:f5:c8:b0:64:b7:2a:85:8d:7c:51:7b:15:
                    96:ed:ae:1c:0a:ee:da:b8:9f:c8:4e:fa:fa:6b:22:
                    2a:2a:76:a9:ba:5e:66:e5:89:eb:16:40:90:d5:57:
                    c0:d9:2b:77:db:39:e5:02:8a:28:a4:9e:e3:7d:4b:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:98:0B:F3:8F:EF:42:84:3F:B6:C8:4E:4F:03:F9:16:C8:A4:BE
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:00:5e:18:12:80:ce:80:d8:60:41:3f:61:67:f1:f4:ea:
         fb:f3:07:54:d0:44:1e:70:bc:fb:b7:61:a8:66:53:a9:57:87:
         d4:d4:d0:da:56:79:7a:11:47:93:02:29:e8:d0:e7:5f:79:53:
         1e:47:89:d4:07:69:d9:bd:87:e0:ee:8d:90:3d:14:aa:29:38:
         95:95:67:4a:c0:bd:a4:83:8d:d1:f2:bf:d1:7b:5d:92:f4:39:
         0e:64:39:f2:64:c0:b1:c2:20:2c:40:6f:fe:b5:de:b4:f7:3b:
         3c:08:09:90:32:38:b0:8e:ad:11:6f:ce:8e:e5:80:73:6c:44:
         6a:af:17:04:dc:09:c8:b3:87:f9:5f:aa:ba:37:2b:24:9a:b6:
         0e:8f:d7:61:4d:08:2b:ab:b8:1e:3c:85:f9:8e:d0:56:66:59:
         1f:76:85:ee:4e:83:de:77:52:60:cf:ed:c8:00:57:80:1a:c7:
         4d:da:43:ea:c3:70:34:77:fe:df:6e:5c:3a:8d:bf:db:73:89:
         7d:25:29:9b:e0:3c:3b:ef:9a:81:b0:f8:32:39:dc:d3:fe:85:
         a2:0b:1a:d9:41:39:b1:ae:33:5e:07:83:4a:54:bc:90:7b:60:
         32:66:80:53:8f:56:a4:11:ae:68:1a:09:87:9f:fb:c4:91:1f:
         49:84:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:18 2026 by rpki-client